With a presence in both Australia and New Zealand, Atmos is a newly established cyber, privacy, and digital risk boutique firm, with a team comprised of Richard Berkahn, Alec Christie, Reece Corbett-Wilkins, and John Moran, all former partners at Clyde & Co LLP.

Since its inception in 2021, the cyber practice at Gilchrist Connell has grown rapidly under the leadership of Nitesh Patel, who brings to bear over 15 years of experience in the field of technology, privacy, data security, incident response and cyber insurance issues.

Allens‘ team collaborates with clients to ensure compliance across all stages of the data lifecycle, from creation and collection to storage, security, use, exchange, commercialisation, retention, and de-identification or disposal. The team acts for leading names in the technology and financial services sectors. In Sydney, Gavin Smith is co-practice leader and heads the firm’s technology, media and telecommunications group, while co-head Valeska Bloch leads the cyber practice, with expertise across transactional, regulatory, governance, risk, and incident response matters in the cybersecurity, technology, and data spheres. David Rountree advises clients in highly regulated industries on innovative commercial use of technology and data. Isabelle Guyot, who was promoted to partner in July 2025, is also noted.

Ashurst‘s data protection and cyber security team combines legal, risk and strategic expertise to support its substantial client roster in critical moments, assisting with privacy, cybersecurity, regulatory compliance, AI, and risk advisory. Geoff McGrath co-leads the team from Sydney and is an expert in technology, data, privacy and digital regulation, providing guidance on high-stakes matters. Melbourne-based Emma Butler, also a co-lead, is a digital economy specialist with experience in complex technology transactions, advising on digital transformation, strategic outsourcing, cloud services, data commercialisation and AI adoption. Clare Doneley is an expert in privacy, cybersecurity and critical infrastructure security. Sashini Walpola is known for her strategic counsel to corporates and government agencies on complex data, privacy and cybersecurity issues. Jarred Gerson is also a key member of the team.

Clayton Utz advises clients on complex cross-jurisdictional regulatory frameworks, AI governance, data transfers and protection, privacy challenges, cyber breach responses, and emerging cyber threats, cutting across multiple industries. Brenton Steenkamp brings to the team over 20 years’ experience advising global clients on cyber and data breach investigations. Ken Saurajen, who assumed the role of head of the national technology practice in July 2025, has a strong track record in advising on some of the market’s most significant, high-profile, and complex technology, privacy, and cyber transactions. Both are based in Sydney.

Noted for its ‘excellent team’, Corrs Chambers Westgarth is a leader in data protection and cyber security. The firm has experience advising Australia’s largest acquirers and users of data across the financial services, government, technology, energy, resources, and retail sectors. James North leads the team from Sydney and heads the TMT practice. Eugenia Kolivos focuses on data protection and IP matters, Arvind Dixit has a focus on data protection, privacy and cyber risk resilience, and Michael Do Rozario advises on privacy, information governance, and cyber-crime, while Frances Wheelahan’s expertise in transactions and matters related to the commercialisation of intellectual property and technology provides the team with valuable balance.

Established as a technology and telecommunications specialist law firm, Gilbert + Tobin is recognised for providing ‘exceptional advice and support’ through its data protection and cyber security team. The team manages issues across the full data lifecycle, considering numerous commercial factors, and particularly stands out for its advice to leading financial institutions and household names in the technology sector. Michael Williams leads the team in Sydney and is an IP litigator with over 25 years’ trial experience, with a focus on digital technologies. Melissa Fai, Simon Burns, and Tim Gole also contribute expertise in privacy, cyber, AI, IT, and commercial arrangements.

King & Wood Mallesons’ cyber and data security team acts on major cyber, ransomware and privacy incidents, and advises boards on governance and responsibilities in a heightened regulatory environment, with a high-profile client roster that includes well-known names in the financial, technology and social media spaces. Cheng Lim leads the cyber incident response team from Melbourne. Patrick Gunning is a leading privacy and data protection lawyer, Michael Swinson advises on digital platforms and emerging technologies, and Kirsten Bowe specialises in IT, data protection, AI and intellectual property matters. Kendra Fouracre is also noted as being a valuable member of the team, with expertise spanning AI, privacy law and regulatory compliance.

Baker McKenzie‘s global data and cyber group advises on complex data challenges at both national and multi-jurisdictional levels. The team is co-led from Sydney by Adrian Lawrence, who is well versed in issues across the digital, data and technology sectors; Anne Petterd, a key member of the IPTech group; technology and cybersecurity litigation expert Ryan Grant; and Paul Forbes, who handles technology-related disputes. They are supported by Simone Blackadder and Jarrod Bayliss-McCulloch. The group’s expertise assists clients ranging from household names to start-ups. Toby Patten departed in May 2025.

Hall & Wilcox‘s team advises on cyber incidents, privacy compliance, and strategic data protection matters. Eden Winokur and Alison Baker co-head the team from Sydney and Melbourne, respectively. Winokur specialises in the full spectrum of cyber risk issues, acting on major Australian and international cyber and data breach matters, while Baker brings to bear over 20 years’ experience advising public and private clients on compliance with the Privacy Act 1988 and broader data protection law. Zeng He focuses on information law, privacy, and digital transformation projects. John Gray, a senior corporate and commercial partner specialising in digital technology and IP law, and Iona Goodwin are also noted.

Maddocks’ data, privacy and cyber team is led by three prominent partners. In Canberra, Katherine Armytage advises Commonwealth agencies and corporates, drawing on substantial ICT experience when addressing data protection and security issues. Sydney-based Sonia Sharma is privacy and cyber lawyer, noted for her work on high-profile data breaches, and as a published authority on cyber security. In Melbourne, Robert Gregory is an experienced commercial lawyer, acting for government and corporate clients across technology and media sectors. Brendan Tomlinson advises on information technology transactions of all types and sizes. The practice particularly stands out for its strength in government and public sector work.

DLA Piper’s team frequently assists clients with data regulatory issues, particularly on cross-border transfers, supported by its data governance methodology. The team is particularly focused on data protection, but has growing expertise in cyber security incident training and response. Melbourne-based Tim Lyons leads the firm’s Australian intellectual property and technology group, bringing to the team over 20 years’ experience advising on data protection and privacy legislation. He is supported by John Fogarty, an experienced litigator specialising in Privacy Act regulatory enforcement matters. Sarah Birkett oversees the data, privacy and cyber team, with extensive experience in both Australia and the UK. Nicholas Boyle departed in October 2024.

Piper Alderman's team provides advice on all aspects of data, privacy, and information security compliance, both domestically and internationally. Tim Clark co-heads the team from Melbourne, advising clients in the IT and health sectors on data protection and privacy compliance. In Sydney, fellow co-head Andrea Beatty is part of the financial services and fintech group, bringing to the table over 20 years’ experience in privacy, regulatory compliance, breach remediation, and corporate governance. Craig Subocz manages data security and privacy matters, including policy development, employee procedures, and training, while Jamin Li assists clients with compliance and privacy complaints.

The cyber security and data protection team at Colin Biggers & Paisley provides a wide range of advice on cyber incidents, data privacy, and technology-related risk. The team supports clients across the insurance, professional services, health, education, infrastructure, and government spheres. Katherine Jones leads the team from Sydney, and brings to bear 18 years’ experience in commercial litigation. Morgan Lane contributes corporate, commercial, and technology expertise, advising on cross-border transactions, technology procurement, and privacy.

Dentons‘ practice is jointly led by Michael Park, who brings to bear 30 years’ experience with particular expertise in digital transformation projects, and Robyn Chatwood, who co-heads the Australian technology sector group – both of whom are based in Melbourne – and Sydney-based Ben Allen, who heads the firm’s global compliance and investigations team. The group advises clients across technology-rich and emerging sectors including education, healthcare, and energy. Matthew Hennessy departed in March 2025.

Herbert Smith Freehills Kramer LLP has a strong practice in data protection, privacy, and cyber security matters, advising on a range of issues from regulatory compliance and risk management to incident response and litigation. Department head Julian Lincoln, who is based in Melbourne, is a knowledgeable technology, data, and privacy lawyer. Kwok Tang brings to the table over 20 years’ experience in IT and telecoms transactions and co-leads the global TMT sector team.

Norton Rose Fulbright's team advises corporates, governments, and data-rich clients across the financial services, healthcare, telecoms, resources, infrastructure, and technology sectors. Sydney-based Nick Abrahams, the global co-head of the digital transformation practice, is valued for his expertise in technology procurement, data privacy, and cybersecurity. Annie Haggar departed in September 2025.

Wotton Kearney‘s practice integrates cyber incident response with privacy, legal, and technology services. Kieran Doyle leads the practice from Sydney, regularly handling high-profile and complex cyber incidents. Nicole Gabryk has significant experience in global insurance matters, advising on cyber incident responses and litigation arising from data breaches. Ellie Brooks assists with investigations and OAIC notifications, while Rebecca Wilson specialises in privacy, data protection, and incident response.

The A&O Shearman team is led by Anna Gamvros, who has over 25 years’ experience in high-stakes, multi-jurisdictional technology, privacy, and cybersecurity matters across Asia and Australia, splitting her time between Sydney and Hong Kong. Ross Phillipson also has extensive experience in data protection, cybersecurity, and information governance in Australia and Europe. The team’s APAC capabilities are further strengthened by Ravi De Fonseka and Daniel Thompson, who joined from Johnson Winter Slattery in May 2024.

Johnson Winter Slattery‘s team has a strong practice in data protection law, advising major Australian and international organisations on cyber incidents. Helen Clarke co-leads the team from Brisbane and is a technology, data, and cyber law expert, while Sydney-based Sophie Dawson takes the lead on privacy and data protection matters, with 20 years’ experience in data breach response issues. Together they advise clients across regulated, technology-driven sectors including healthcare, financial services, digital platforms, transport, education, and energy.

Pinsent Masons LLP‘s data and privacy team advises on complex projects, including regulation of infrastructure, global data retention, cross-border transfers, and AI deployment. The team has strength in cyber incident preparation and response, advising insured and self-insured clients on managing ransomware and extortion attacks, engaging regulators, law enforcement, and government agencies. Co-led by Veronica Scott and James Arnott in Melbourne, the team was strengthened in August 2024 by the addition of Susan Kantor, who joined from Minter Ellison, enhancing the team’s expertise in AI, incident response, and cybersecurity law.